Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2122/OJDPVrD0kTHjtouU3jg8J2nl0AM.roa
File: OJDPVrD0kTHjtouU3jg8J2nl0AM.roa (raw, json)
Hash identifier: QYDKk9uHN0XOV8GNtIkk3BDHxD9WpzbXFR9j9NCyc3M=
Subject key identifier: 38:90:CF:56:B0:F4:91:31:E3:B6:8B:94:DE:38:3C:27:69:E5:D0:03
Certificate issuer: /CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97
Certificate serial: 20AE
Authority key identifier: 88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/OJDPVrD0kTHjtouU3jg8J2nl0AM.roa
Signing time: Sat 13 Sep 2025 03:05:50 +0000
ROA not before: Sat 13 Sep 2025 03:05:50 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 4515
IP address blocks: 123.49.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8366 (0x20ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97
Validity
Not Before: Sep 13 03:05:50 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=3890CF56B0F49131E3B68B94DE383C2769E5D003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:40:d7:3e:05:2c:ee:2b:9f:d6:a5:41:79:e3:
b7:f9:2d:ee:47:5e:fe:c9:d0:58:e7:af:0e:af:72:
0c:68:f6:52:b5:de:98:7d:2f:a5:16:2f:e2:cf:f5:
49:3f:a1:e7:d3:c3:43:8f:b7:9a:2e:be:32:96:59:
43:00:ba:81:56:6c:24:d5:5c:e4:84:13:6e:15:7f:
46:df:66:47:4d:24:a5:3a:bf:83:96:a4:31:29:5e:
a2:d9:d1:f3:93:d7:cd:60:31:93:10:9d:38:21:63:
c9:e0:13:ce:65:f7:1e:b9:7b:77:74:32:6b:5f:f3:
c3:aa:5f:d0:1a:55:c2:3a:11:95:53:7f:74:7b:a7:
ca:87:e4:36:9b:12:41:d0:ef:f4:04:3d:dd:f3:3d:
aa:47:c3:ff:39:74:42:e9:5b:af:12:8b:0d:67:93:
90:94:b1:a0:fd:c4:e8:05:ee:18:f4:1b:68:0a:51:
08:e0:27:f4:bd:0f:0c:42:95:28:56:eb:6d:20:64:
d2:c9:8b:ad:24:4e:d4:9f:e7:3f:8b:91:8c:88:fd:
89:12:69:d5:7e:81:62:20:8b:7c:76:02:30:56:e0:
33:cf:5a:11:50:af:8a:05:11:45:cb:6c:ba:05:3b:
1a:4c:27:3b:a9:bf:12:0e:22:6d:41:0b:dd:9c:8d:
95:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:90:CF:56:B0:F4:91:31:E3:B6:8B:94:DE:38:3C:27:69:E5:D0:03
X509v3 Authority Key Identifier:
keyid:88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/iIhNTUp18X8I3UTLqVkv5w9TnZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/OJDPVrD0kTHjtouU3jg8J2nl0AM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.49.246.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:67:f7:bf:9d:e7:38:35:a6:a6:bf:f5:aa:d8:b5:b4:e8:16:
39:0b:bc:8a:71:12:68:42:8c:95:3f:1a:a6:c7:62:bd:a3:ed:
ad:1c:0d:a5:36:07:bf:51:98:ac:86:5e:34:e4:1a:0d:d0:11:
10:61:f0:0f:40:70:fb:82:1b:bb:0d:c4:12:67:60:97:03:1c:
00:6c:4b:20:df:15:f1:72:b6:c6:36:71:55:cd:aa:c3:7a:68:
5a:3f:da:b1:22:3f:d3:24:26:ce:6d:b6:82:20:2f:5f:d2:3a:
46:50:51:ae:a4:ea:86:23:6c:89:bd:ec:15:b8:37:69:69:bf:
b3:2a:8a:3c:8d:bc:81:5a:37:25:5e:3f:29:79:c8:0e:9e:c0:
39:d8:b3:e7:3e:12:99:91:90:f0:7c:c5:e1:e0:d3:0d:98:64:
17:ae:cd:8d:8a:4c:1c:13:06:0d:f3:7c:38:af:40:ce:ef:2a:
eb:51:f5:bd:1e:c5:2f:c8:c3:12:b2:27:a0:60:62:50:85:0a:
13:b2:2e:9d:b2:db:12:73:18:f4:23:e5:d0:ef:18:89:71:03:
ee:e9:2c:55:4c:cc:09:14:25:4b:61:01:49:df:e6:31:61:79:
90:08:9a:98:79:3e:8c:5c:d7:12:8f:96:3b:87:e6:c2:c1:82:
24:bb:dd:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:52:54 2025 by rpki-client